[slurm-users] Secondary Unix group id of users not being issued in interactive srun command

[Timo Rothenpieler]

Make sure you properly configured nsswitch.conf.
Most commonly this kind of issue indicates that you forgot to define 
initgroups correctly.

It should look something like this:

...
group:      files [SUCCESS=merge] systemd [SUCCESS=merge] ldap
...
initgroups: files [SUCCESS=continue] ldap
...


On 28.01.2022 06:56, Ratnasamy, Fritz wrote:
> Hi,
> 
> I have a similar issue as described on the following link 
> (https://groups.google.com/g/slurm-users/c/6SnwFV-S_Nk) 
> <https://groups.google.com/g/slurm-users/c/6SnwFV-S_Nk)>
> A machine had some existing local permissions. We have added it as a 
> compute node  to our cluster via Slurm. When running an srun interactive 
> session on that server,
> it would seem that the LDAP groups shadow the local groups.
> johndoe at ecolonnelli:~ $ groups
> Faculty_Collab ecolonnelli_access #Those are LDAP groups
> johndoe at ecolonnelli:~ $ groups johndoe
> johndoe : Faculty_Collab projectsbrasil core rais rfb polconnfirms 
> johndoe vpce rfb_all backup_johndoe ecolonnelli_access
> 
> The issue is that now the user can not access folders that have
> his local group permissions (such as projectsbrasil,rais, rfb, core 
> ect..) when he request an interative session to that compute node
> Is there any solution to that issue?
> Best,